Linro Release 2026.07.8 — "Optimistic Sandpiper"

Released 2026-07-19 · supersedes 2026.07.7

Summary

Resource labels are now driven by a full label-rules system: create, validate, preview, and apply rules, see resulting labels in the inventory list and on each resource, and understand exactly why every label was applied. Simulations are also available as an early preview.

Features

• Resource labels now appear directly in the inventory list view.
• New label rules management: create, edit, validate, preview, and apply labeling rules, with revision history, key policies, and a dedicated navigation entry.
• "Why these labels?" on the resource page explains which rules and key policies produced each label.
• Preview now shows which keys and values a rule drops due to key policies, and copy rules show the exact keys they emit.
• Key policies use a chips input with suggestions drawn from your existing rules, and advanced rule options are collapsed by default for a simpler form.
• Contexts suggest relevant filters and tie into rule coverage, and can be viewed on the resource page.
• Rule editing now detects concurrent edits and prompts you to reload if someone else changed a rule.
• Simulations are available as an early-preview (beta) feature, including the ability to describe GCP resources.
• Mint Simulation-scoped personal access tokens directly from the token UI.
• Support for custom S3-compatible storage endpoints, including path-style addressing.

Bugfixes

• Resource ID links in query result tables now open in a new tab.
• GCP resources now display recognizable icons in the graph.
• Drift detection now correctly counts disabled and removed rules and no longer flags unchanged rules as edited.
• Preview now accurately reports how many values are dropped instead of overstating its drop list, and progress and status messages honestly reflect what happened.
• The rule editor no longer discards rules during editing.
• Fixed a case where suggested rule priority could collide on a cold load.
• The Validate button now gives clear, visible feedback and a tooltip.
• Filters that match everything now show a catch-all warning.
• The transform dropdown is no longer transparent, and the "fold" option is now labeled "Ignore case."
• Popovers are now reliably visible, and key-policy explanations are clearer.
• In Simulations, deleting a resource that isn't in live inventory is now correctly treated as a no-op.

Linro Release 2026.07.7 — "Zany Lynx"

Released 2026-07-17 · supersedes 2026.07.6

Summary

Inventory operations are more resilient: scans no longer fail when linked or policy-violating resources have already been removed. The version picker also now reliably recognizes marketplace plugins referenced by a short slug.

Bugfixes

• Inventory operations no longer fail when some linked or policy-violating resources have already been deleted; missing resources are now handled gracefully.
• The version picker now correctly recognizes marketplace plugins referenced by a short slug and resolves them to the right plugin.
• Fixed a case where a completed operation could return results built from outdated data.

Linro Release 2026.07.6 — "Grand Ferret"

Released 2026-07-15 · supersedes 2026.07.5

Summary

This release surfaces the current Linro release version across the product, and makes violation and resource lookups more resilient when the underlying resources have been deleted.

Features

• The About screen and the ServerInfo API now display the current Linro release version, making it easy to confirm which release you're running.

Bugfixes

• Violation enrichment no longer fails when a referenced resource has been deleted.
• Batch resource lookups can now tolerate resources that no longer exist, returning the available resources instead of failing the entire request.

Linro Release 2026.07.5 — "Sleek Yabby"

Released 2026-07-15 · supersedes 2026.07.4

Summary

Deleting a sensor or sensor profile is now more reliable and transparent: failures show a clear error instead of the dialog closing without feedback, and you get actionable reasons when a sensor can't be removed.

Bugfixes

• When deleting a sensor profile fails, the error is now shown in the dialog instead of the dialog closing silently with no explanation.
• Sensor deletion now explains what must be resolved first when a sensor can't be removed, and deprovisioned managed sensors are cleaned up automatically.

Linro Release 2026.07.4 — "Lively Kinkajou"

Released 2026-07-14 · supersedes 2026.07.3

Summary

Checks are now more resilient: a failure in a single evaluation is isolated and no longer disrupts other checks running at the same time.

Bugfixes

• Isolated check evaluations so that a failure in one no longer affects other checks running concurrently.

Linro Release 2026.07.3 — "Clever Rabbit"

Released 2026-07-14 · supersedes 2026.07.2

Summary

This release introduces end-to-end control over personal data handling: choose a PII scrubbing policy—and the categories it covers—when installing or editing a plugin, and see clearly which plugins and fields involve personal information through new "PII Aware" indicators.

Features

• Select a PII scrubbing policy, and the specific PII categories it applies to, when installing or editing a plugin.
• Plugins that handle personal data are now marked "PII Aware," including a "Collects PII" badge on the plugin details view and per-resource PII badges in the resource-type browser and resource tables.
• Scrubbed field values are now flagged with a PII badge directly in your inventory.
• Guided plugin onboarding now accounts for your PII scrubbing settings.

Bugfixes

• Event impact lookups now use the correct filter, returning accurate results.
• Guided onboarding no longer references a tool that doesn't exist and handles invalid input more safely.
• Plugin state reported by sensors is now reliably saved, so installation status reflects the actual state.
• Editing a resource with a partial update no longer clears fields and relationships that weren't part of the change.
• Resource and delete responses now render from current data, preventing stale or missing relationships.
• When an environment has no administrator, the next user to sign in is granted admin access, restoring account access.

Linro Release 2026.07.2 — "Vigilant Echidna"

Released 2026-07-05 · supersedes 2026.07.1

Both commits in this release are internal-only and can't be published:

• fix(test): deterministic frameworks upgrade/reconfigure integration tests — a test-suite change, omitted per the rules (tests).
• feat(clickhouse): per-installation ClickHouse database — describes internal storage architecture and names the underlying database engine. There's no customer-visible behaviour I can describe without exposing implementation detail, so I'm leaving it out ("when unsure, leave it out").

That leaves no items for Summary, Features, or Bugfixes, so the release notes document is empty.

If the ClickHouse change actually delivers a customer-facing benefit (e.g. stronger data isolation between installations, or a data-residency guarantee), tell me what that benefit is and I'll write a safe Features bullet for it without naming the engine or the architecture.

Linro Release 2026.07.1 — "Fearless Weasel"

Released 2026-07-04 · supersedes 2026.07.0

Summary

The Model Context Protocol (MCP) endpoint is now available, and timestamps are returned consistently in RFC3339 format across result payloads.

Features

• The Model Context Protocol (MCP) endpoint is now available through the API.
• A /health endpoint is now served for checking service availability.

Bugfixes

• Timestamps in result payloads are now returned consistently in RFC3339 format, including values that use a space separator.
• An event's source origin is now preserved when a refresh is retried, so lineage information is no longer lost.

Linro Release 2026.06.11 — "Humble Curlew"

Released 2026-06-27 · supersedes 2026.06.10

Summary

This release adds a new frameworks catalog, letting you browse and apply security frameworks directly from the interface. Sensor profile changes now apply to running sensors immediately, with no need to restart.

Features

• Browse and apply security frameworks from a new catalog in the interface.
• New guided onboarding experience to help you get set up faster, with expanded access for operator-level users.

Bugfixes

• Sensor profile changes now propagate to live sensors automatically, updating connectors and event sources without a restart.
• Plugins now display an "Installing" status while an upgrade is in progress, so the current state is always clear.

Linro Release 2026.07.0 — "Blithe Jaguar"

Released 2026-07-01 · supersedes 2026.06.10

Summary

Plugins now perform a full resource cleanup on uninstall with a deletion preview, and syncs run a pre-flight eligibility check so you can catch sensor issues before they start. Managed sensor provisioning failures are now surfaced directly.

Features

• Full resource cleanup when uninstalling a plugin, with a deletion preview so you can see exactly what will be removed before you confirm.
• Pre-flight sensor-eligibility check for syncs, catching problems before a sync begins.
• Managed sensor provisioning failures are now surfaced so you can see when a sensor fails to come up.
• View the scope dimensions a plugin requests before granting access.
• Guided onboarding assistance and operator-tier access through the agent integration.
• New identity reflection tool to confirm which caller you're acting as.
• Refreshed frameworks catalog.

Bugfixes

• Plugins now show an "Installing" status while an upgrade is in progress.
• Sensor profile changes now propagate to live sensors, including their connectors and event sources.

Linro Release 2026.06.10 — "Stellar Turtle"

Released 2026-06-25 · supersedes 2026.06.9

Summary

Plugin upgrades now reliably record their final installation status, so you can clearly see whether an upgrade succeeded or failed.

Bugfixes

• Plugin upgrades now correctly update the installation status, accurately reflecting whether the upgrade completed successfully or failed.

Linro Release 2026.06.9 — "Daring Otter"

Released 2026-06-25 · supersedes 2026.06.8

Summary

You can now choose which plugin version to install or update to, giving you full control over plugin upgrades. Large plugins also now install reliably.

Features

• Select a specific version when installing or updating a plugin, instead of being limited to automatic updates.

Bugfixes

• Resolved an issue that could prevent large plugins from installing successfully.

Linro Release 2026.06.8 — "Neighborly Hornbill"

Released 2026-06-23 · supersedes 2026.06.7

Packaging-only release: chart updates (linro-cloud); no component code changes.

Linro Release 2026.06.7 — "Witty Capybara"

Released 2026-06-22 · supersedes 2026.06.6

Summary

This release improves sensor reliability by ensuring the correct plugin is delivered for each sensor's hardware architecture.

Bugfixes

• Sensors now receive the plugin built for their reported hardware architecture, preventing mismatched plugin installations.

Linro Release 2026.06.6 — "Genteel Swallow"

Released 2026-06-22 · supersedes 2026.06.5

Packaging-only release: chart updates (linro-cloud); no component code changes.

Linro Release 2026.06.5 — "Rosy Numbat"

Released 2026-06-22 · supersedes 2026.06.4

Summary

This release introduces keyless cloud onboarding: a new Cloud Access page guides you through connecting an installation without managing long-lived credentials, and managed sensors can now authenticate to the cloud without static keys.

Features

• Keyless cloud onboarding: a new Cloud Access page surfaces the per-installation values needed to connect, so you can link an installation to the cloud without creating or rotating long-lived credentials.
• Managed sensors now authenticate to the cloud using short-lived, identity-based credentials instead of static keys.

Bugfixes

• Tables in rendered Markdown content now display correctly.
• Plugins now install correctly on clusters running non-amd64 CPU architectures (such as ARM), rather than failing to match an artifact.

Linro Release 2026.06.4 — "Calm Grebe"

Released 2026-06-18 · supersedes 2026.06.3

Summary

No user-facing features or fixes, every section is empty, so per the rules the release notes document is empty (no sections, no "none" placeholders). There is nothing safe to publish for this release.

Features

• Internal stability improvements

Bugfixes

Linro Release 2026.06.1 — "Amiable Aardvark"

Released 2026-06-05 · supersedes 2026.06.0

Summary

The latest builds of every Linro component, pinned as one upgradeable bundle on top of the 2026.06.0 baseline — newer frontend, sensor, and plugin runtime, with cloud inventory and compliance across AWS, Azure, and Kubernetes.

Features

• Latest builds of every platform component, pinned together — frontend, sensor, and plugin runtime advanced past the 2026.06.0 baseline
• Cloud inventory and compliance across connected AWS, Azure, Kubernetes, and CVE sources

Bugfixes

• Rolling fixes from each component repo since the previous release

Linro Release 2026.06.2 — "Tidy Siskin"

Released 2026-06-07 · supersedes 2026.06.1

Summary

You can now stream logs from your managed sensors in real time with the new live log viewer, and generate personal access tokens directly from the security page.

Features

• Live log viewer: stream logs from your managed sensors in real time.
• Generate personal access tokens directly from the security page.

Bugfixes

• Plugins now automatically apply their required schema when installed or upgraded, removing a manual setup step.
• Newly created sensor profiles now include your installed plugins.
• Environment and configuration changes now fully apply to managed sensors instead of only triggering a restart.

Linro Release 2026.06.3 — "Keen Badger"

Released 2026-06-07 · supersedes 2026.06.1

Summary

View live logs from your managed sensors directly in the console, and generate personal access tokens from the security page for programmatic and API access.

Features

• Stream live logs from your managed sensors in a built-in log viewer.
• Create personal access tokens directly from the security page.

Bugfixes

• Plugins now apply their required data schema automatically when you install or upgrade them.
• Newly created profiles now include your installed plugins.
• Environment variable changes for managed sensors are now fully applied.